czit
Static task
static1
Behavioral task
behavioral1
Sample
3ec905f21c274ba243c76bd18e826fce_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ec905f21c274ba243c76bd18e826fce_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3ec905f21c274ba243c76bd18e826fce_JaffaCakes118
-
Size
432KB
-
MD5
3ec905f21c274ba243c76bd18e826fce
-
SHA1
e0c393404acdc38220c1013376106ae3b6c93f1e
-
SHA256
78db5946b3f5140df00f9c9b7d6470016e078a6340dd9969d6f6bd1d944c6e29
-
SHA512
b199071dadcc21daf1bf125c5b4203b90a1c29d16625d4f6729bb24be55a7c2507ce7ba295e0de934cf1aad0075f787e1eab8769e853b3f20454398387d9441d
-
SSDEEP
6144:X05o0zlZrreDmK3NomvRU4SnQNJdJq+btX4L4vfnuIhCRPD35oCNEQ6o:XWo0ZZPeDvNPvnHdsqYsCRPb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec905f21c274ba243c76bd18e826fce_JaffaCakes118
Files
-
3ec905f21c274ba243c76bd18e826fce_JaffaCakes118.dll windows:4 windows x86 arch:x86
fa60bdbb09abbb4a8e0446968352c673
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
SearchPathA
ExitProcess
GetComputerNameA
GetBinaryTypeA
CancelIo
BackupSeek
BackupRead
lstrlenW
lstrlenA
SetCurrentDirectoryA
GetDriveTypeW
GetDriveTypeA
GetWindowsDirectoryA
HeapFree
GetSystemDirectoryW
GetSystemDirectoryA
GetComputerNameW
GetCurrentDirectoryW
GetFileAttributesA
GetFileAttributesW
lstrcmpW
HeapAlloc
GetProcessHeap
GetCurrentDirectoryA
advapi32
GetUserNameA
winmm
GetDriverModuleHandle
auxGetVolume
Exports
Exports
Sections
.code Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 364KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ